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AMENDMENTS TO THE CLAIMS; 

This listing of claims will replace all prior versions, and listings, of claims in the 
application: 

1 . (Currently Amended) A data processing apparatus having a secure domain and a non-secure 
domain, in the secure domain devices of the data processing apparatus having access to secure data 
which is not accessible in the non-secure domain, the data processing apparatus comprising: 

a device bus; 

a piuralitv of devices d eviee-coupled to the device bus^ aftd -each operable to issue a memory 
access request pertaining to either said secure domain or said non-secure domai n at least one of the 
devices being operable in a plurality of modes, including at least one non-secure mode being a 
mode in the non-secure domain and at least one secure mode being a mode in the secure domain ; 
and 

a memory coupled to the device bus and operable to store data required by the 
devicesdeviee, the memory comprising secure memory for storing secure data and non-secure 
memory for storing non-secure data; 

each tbe-device being operable to issue onto the device bus the memory access request when 

an_access to an item of data in the memory is required, the memory access request issued by the 
device including a domain signal identifying whether the memory access request pertains to said 
secure domain or said non-secure domai n, and the domain signal being provided for use in 
determining whether the access defined by the memory access request is allowed to proceed . 

2. (Currently Amended) A data processing apparatus as claimed in Claim 1, wherein for said at 
least one of the devices, said th e d e vice is operable in a plurality of modes are replicated in said -? 
including at loai ^ i one non r^ e cure mode being a mode in the non r^ecure domain and at l e a^U one 
.s e cure mode being a mode in the secure domai n and said non-secure domain . 

3. (Currently Amended) A data processing apparatus as claimed in Claim 1, wherein tfie 
devices device has have a predetermined pin for outputting the domain signal onto the device bus. 
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4. (Currently Amended) A data processing apparatus as claimed in Claim 1, wherein in said 
non-secure domain said at least one of the devices d eviee-is operable under the control of a non- 
secure operating system, and in said secure domain said at least one of the devices d eviee-is 
operable under the control of a secure operating system. 

5. (Currently Amended) A data processing apparatus as claimed in Claim 1, further comprising 
partition checking logic coupled to the device bus and operable whenever the memory access 
request as issued by one of the devices d eviee-pertains to said non-secure domain to detect if the 
memory access request is seeking to access the secure memory, and upon such detection to prevent 
the access specified by that memory access request. 

6. (Currently Amended) A data processing apparatus as claimed in Claim 5, wherein the 
partition checking logic is managed by one of the devices d eviee-when operating in a predetermined 
secure mode in said secure domain. 

7. (Original) A data processing apparatus as claimed in Claim 5, wherein the partition 
checking logic is provided within an arbiter coupled to the device bus to arbitrate between memory 
access requests issued on the device bus. 

8. (Currently Amended) A data processing apparatus as claimed in Claim 1, wherein said at 
least one of the devices d eviee-is a chip incorporating a processor, the chip further comprising a 
memory management unit operable, when the processor generates the memory access request, to 
perform one or more predetermined access control functions to control issuance of the memory 
access request onto the device bus. 

9. (Original) A data processing apparatus as clahned in Claim 8, wherein the chip further 
comprises: 

further memory coupled to the processor via a system bus, the further memory operable to 
store data required by the processor, the further memory comprising secure further memory for 
storing secure data and non-secure further memory for storing non-secure data; and 
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further partition checking logic coupled to the system bus and operable whenever the 
memory access request is generated by the processor when operating in a non-secure mode in said 
non-secure domain to detect if the memory access request is seeking to access either the secure 
memory or the secure further memory, and upon such detection to prevent the access specified by 
that memory access request. 

10. (Currently Amended) A method of accessing a memory in a data processing apparatus 
having a secure domain and a non-secure domain, in the secure domain devices of the data 
processing apparatus having access to secure data which is not accessible in the non-secure domain, 
the data processing apparatus comprising a device bus, a plurality of devices deviee-coupled to the 
device bus^ each a nd-operable to issue a memory access request pertaining to either said secure 
domain or said non-secure domain, at least one of the devices being operable in a plurality of 
modes, including at least one non'Secure mode being a mode in the non-secure domain and at least 
one secure mode being a mode in the secure domain and a memory coupled to the device bus and 
operable to store data required by the devicesde¥i€e, the memory comprismg secure memory for 
storing secure data and non-secure memory for storing non-secure data, the method comprising the 
steps of: 

(i) issuing from any of the devices devie^nto the device bus the memory access request when 
an_access to an item of data in the memory is required;-aftd 

(ii) including within the memory access request a domain signal identifying whether the 
memory access request pertains to said secure domain or said non-secure domai n: and 

(iii) using the domain signal to determine whether the access defined by the memory access 
request is allowed to proceed . 

1 1 . (Currently Amended) A method as claimed in Claim 10, wherein for said at least one of the 
devices, said plurality of modes are replicated in said secure domain and said non-secure domaint he 
d e vice is operable in a plurality of moder n , including at least on e non e . e cure mode being a mod e in 
the non secure domain and at least one secur e mode being a mode in the secure domain . 

12. (Curremly Amended) A method as claimed in Claim 10, wherein the devices device hai; 
have a predetermined pin for outputting the domain signal onto the device bus. 
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13. (Currently Amended) A method as claimed in claim 10, wherein in said non-secure domain 
said at least one of the devicesd eviee is operable under the control of a non-secure operating system, 
and in said secure domain said at least one of the devicesdeviee is operable under the control of a 
secure operating system. 

14. (Currently Amended) A method as claimed in claim 10, further comprising the steps of: 

(iii) whenever the memory access request as issued by one of the devices de¥i€e-pertains to said 
non-secure domain, employing partition checking logic coupled to the device bus to detect if the 
memory access request is seeking to access the secure memory; and 

(iv) upon such detection, preventing the access specified by that memory access request. 

15. (Currently Amended) A method as claimed in Claim 14, wherein the partition checking 
logic is managed by one of the devicesdeviee when operating in a predetermined secure mode in 
said secure domain. 

16. (Original) A method as claimed in Claim 14, wherein the partition checking logic is 
provided within an arbiter coupled to the device bus to arbitrate between memory access requests 
issued on the device bus, 

17. (Currently Amended) A method as claimed claim 10, wherein said at least one of the 
devicesdeviee is a chip incorporating a processor, the chip further comprising a memory 
management unit, when the processor generates the memory access request, the method comprising 
the step of: 

employing the memory management unit to perform one or more predetermined access 
control functions to control issuance of the memory access request onto the device bus. 

18. (Original) A method as claimed in Claim 17, wherein the chip further comprises further 
memory coupled to the processor via a system bus, the further memory operable to store data 
required by the processor, the further memory comprising secure further memory for storing secure 
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data and non-secure further memory for storing non-secure data, and further partition checking logic 
coupled to the system bus, the method further comprising the steps of: 

whenever the memory access request is generated by the processor when operating in a non- 
secure mode in said non-secure domain, employing the further partition checking logic to detect if 
the memory access request is seeking to access either the secure memory or the secure further 
memory; and 

upon such detection, preventing the access specified by that memory access request. 

19. (Canceled). 

20. (Canceled). 
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